Incident Response Analyst: Threat Hunting & Falcon Expert

TechDigital Group; New York (NY); Sur place; USD 85 000 - 120 000; Plein temps

Résumé du poste

TechDigital Group in New York, NY seeks an experienced Incident Response Analyst to join our security operations. You will support incident response, orchestration with the SOC, and threat hunting across IDB devices and networks.

You will also help improve detection, containment, and remediation processes using our SOAR platform. The role requires hands-on experience with CrowdStrike Falcon, strong documentation, and cross-functional collaboration to safeguard data and IP while continuously

Qualifications

• Proficient in incident response processes and lifecycle management.
• Familiar with CrowdStrike Falcon ecosystem and EDR tooling.
• Experience coordinating with SOC teams and IT/Security Ops.
• Understanding of sensor management and policy configuration.

Responsabilités

• Document evidence throughout incident life cycle and handover shifts.
• Triage security incident tickets/events, prioritize and assign.
• Analyze threat data and build evidence-backed dispositions.
• Contain and remediate actions including network isolation where needed.
• Maintain detailed case reports in the case management tool.
• Contribute to SOAR playbooks and runbooks, update response docs.
• Monitor detection programs to protect data and IP from threats.
• Hunt for malicious activity and anomalous events across IDs networks.
• Coordinate remediation after findings and drive improvement actions.
• Collaborate with Security Architecture to integrate TM tools.

Connaissances

Incident Response

CrowdStrike Falcon

SOC Collaboration

Policy Configuration

Outils

SOAR

IDB Tools

Description du poste

TechDigital Group in New York, NY seeks an experienced Incident Response Analyst to join our security operations. You will support incident response, orchestration with the SOC, and threat hunting across IDB devices and networks.

You will also help improve detection, containment, and remediation processes using our SOAR platform. The role requires hands-on experience with CrowdStrike Falcon, strong documentation, and cross-functional collaboration to safeguard data and IP while continuously